Overview

overview

10

Static

static

10

NEAS.af426...bb.exe

windows7-x64

10

NEAS.af426...bb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.af4267e0b4e5fa0fc165de5c320ecabb.exe

  • Size

    243KB

  • Sample

    231028-wga12scg81

  • MD5

    af4267e0b4e5fa0fc165de5c320ecabb

  • SHA1

    b445e2658acba26484b4845cdad59aad4cfab55a

  • SHA256

    ec9f2ff4f0075db9a6e1d4be5d405fbb07555b9c403764a409be0e0378425b34

  • SHA512

    f0b4f646b5076ab30ef0efa9746cb28bcb17b681c930ed75c45c9057395afec270793ba576fd3ad0890d732dbe360ac1888a195c6a09e74a01ba2180ed932b87

  • SSDEEP

    6144:/n8oBoAwkuUrxzUNaDJvZUvxrQBZg3kFz2so48J:77hUNaVvZhBZvz2V48J

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.af4267e0b4e5fa0fc165de5c320ecabb.exe

    • Size

      243KB

    • MD5

      af4267e0b4e5fa0fc165de5c320ecabb

    • SHA1

      b445e2658acba26484b4845cdad59aad4cfab55a

    • SHA256

      ec9f2ff4f0075db9a6e1d4be5d405fbb07555b9c403764a409be0e0378425b34

    • SHA512

      f0b4f646b5076ab30ef0efa9746cb28bcb17b681c930ed75c45c9057395afec270793ba576fd3ad0890d732dbe360ac1888a195c6a09e74a01ba2180ed932b87

    • SSDEEP

      6144:/n8oBoAwkuUrxzUNaDJvZUvxrQBZg3kFz2so48J:77hUNaVvZhBZvz2V48J

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks